Track permissions granted to extensions in prefs

chrome/browser/download/download_util.cc

 // Copyright (c) 2010 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 //
 // Download utility implementation
 
 #include "chrome/browser/download/download_util.h"
 
 #if defined(OS_WIN)
 #include <shobjidl.h>
@@ skipping 236 matching lines @@
   if (UserScript::HasUserScriptFileExtension(download_item.url())) {
     installer->InstallUserScript(download_item.full_path(),
                                  download_item.url());
     return;
   }
 
   bool is_gallery_download = service->IsDownloadFromGallery(
       download_item.url(), download_item.referrer_url());
   installer->set_original_mime_type(download_item.original_mime_type());
   installer->set_apps_require_extension_mime_type(true);
-  installer->set_allow_privilege_increase(true);
+  installer->set_allow_privilege_increase(false);
   installer->set_original_url(download_item.url());
   installer->set_is_gallery_install(is_gallery_download);
   installer->InstallCrx(download_item.full_path());
   installer->set_allow_silent_install(is_gallery_download);
 }
 
 // Download progress painting --------------------------------------------------
 
 // Common bitmaps used for download progress animations. We load them once the
 // first time we do a progress paint, then reuse them as they are always the
@@ skipping 473 matching lines @@
     ExtensionsService* service = profile->GetExtensionsService();
     if (!service ||
         !service->IsDownloadFromGallery(info->url, info->referrer_url)) {
       return true;
     }
   }
   return false;
 }
 
 }  // namespace download_util